Authtoken validate and expiration, test refactoring